Digital platforms

Amazon.com, Inc.

Rank: 13th
Score: 25%

Headquartered in the United States, Amazon runs one of the world’s largest e-commerce retail platforms, with more than 2.45 billion monthly visitors. It also offers cloud computing, web hosting, video streaming, facial recognition software, and a virtual assistant service known as Alexa. Its revenues are driven by its online retail business, cloud computing and hosting services, and advertising.

Yahoo2
54%
Google4
47%
Meta5
46%
Apple6
44%
Kakao6
44%
Yandex8
35%
Baidu9
28%
VK9
28%
Alibaba11
26%
Samsung11
26%
Amazon13
25%
Tencent13
25%

Amazon earned the lowest score in this year’s ranking, tying with Chinese tech giant Tencent for last place. Despite labor shortages and pandemic-related disruptions in the supply chain, the company reported earning record profits in the final quarter of 2021. Amazon faced public scrutiny over its decision to block the sale of thousands of products, including books (several censored titles promoted things like COVID pseudoscience and Holocaust denial), and to restrict access to user reviews and accounts, but published no concrete details about how it enforced its content-related rules. In response to Russia’s early 2022 invasion of Ukraine, Amazon targeted both Russia and its ally Belarus with significant restrictions: in both countries, it halted shipments, cut off Prime Video, and suspended new user registration for Amazon Web Services. The company offered no evidence that it had conducted human rights impact assessments prior to imposing these measures.

Amazon’s treatment of user data was also under fire. In a class action lawsuit in the U.S., plaintiffs accused Amazon’s Alexa of recording their conversations without being prompted. In the EU, Amazon broke records with a €746 million fine for breaching the region’s General Data Protection Regulation in its targeted advertising practices. Both insiders’ warnings and internal documents pointed to major flaws in its data security and compliance systems, adding to concerns about the company’s poor record on human rights. Consistent with these reports, we found that Amazon disclosed insufficient information about how it handles, retains, and protects user information and that it showed little commitment to assessing the privacy and freedom of expression impacts of some of its most popular services.

Key takeaways

  • Although Amazon made improvements in governance and privacy, it was by far the least transparent U.S.-based platform in our evaluation, and outperformed by Russian, Chinese, and Korean based platforms.
  • Amazon published the “Amazon Information Request Report” revealing some data about government requests for user information, but the company published only generalized information about material it removed for violations of company rules and released no data regarding government requests for content restrictions.
  • Amazon’s e-commerce platform implemented a recommendation system based on users’ interests and activities on the website but did not clarify how the system is deployed nor did it publish any policy providing information about the development and deployment of its algorithmic systems.

Key recommendations

  • Establish strong human rights governance and oversight across global operations. Amazon should disclose more information about its human rights due diligence, including whether it conducts human rights impact assessments on freedom of expression and privacy associated with the use and development of algorithms.
  • Be transparent about government demands and enforcement of platform rules. Amazon should regularly publish data about the volume and nature of actions it takes to restrict content in response to government demands or to the violation of its own rules.
  • Be transparent about the handling of user information. Amazon should provide more detail about how and for what purposes it collects, infers, and shares user information in all jurisdictions. It should also disclose more about the retention of user data.
  • Publish a comprehensive policy on the use and development of ad targeting and algorithmic systems.

Services evaluated:

  • Amazon.com
  • Alexa

The 2022 Big Tech Scorecard covers policies that were active on November 1, 2021. Policies that came into effect after November 1, 2021, were not evaluated for this ranking.

Scores reflect the average score across the services we evaluated, with each service weighted equally.

  • Lead researchers: Jie Zhang, Veszna Wessenauer

Changes since 2020

  • Amazon’s board of directors appointed an audit committee to oversee management of risks in various areas, including data privacy. The company also provided employees with cybersecurity awareness training on data privacy and security topics.
  • Amazon.com acknowledged that it removed products, listings, and accounts numbering in the millions for violating platform rules, but offered only very generalized data on the quantities of removals.
  • Amazon stated that users can access, delete, or request a copy of their personal data from the company, and provided instructions on how to request a copy of one’s user information, but did not specify what types of information users can obtain or delete.
  • Alexa disclosed that it conducts security audits with an internal team and with third-party providers. It also provided long-term guaranteed security updates for Amazon Echo smart speakers, which run on Alexa. In addition, some calls and features between Alexa devices were updated to use end-to-end encryption.

Scores since 2017

100%0%2017201820192020202220%25%
Most companies’ scores dropped between 2019 and 2020 with the inclusion of our new indicators on targeted advertising and algorithmic systems. To learn more, please visit our Methodology development archive.
Governance14%
Freedom of expression16%
Privacy34%

We rank companies on their governance, and on their policies and practices affecting freedom of expression and privacy.

Governance 14%

Despite publishing more information about its management oversight (G2), training (G3), and stakeholder engagement (G5) processes than last year, Amazon’s performance in the governance category still lagged far behind most of the digital platforms we evaluate. Amazon announced its first human rights impact assessment, which focused on raw and recovered materials in the supply chain for Amazon-branded digital devices. The assessment did not tackle any risks associated with freedom of expression and information, privacy, or discrimination (G4). Amazon’s e-commerce service provided some ways for sellers and customers to appeal when their accounts or listings were removed, but the platform did not provide any channel for users to complain if they felt their rights were violated by the company's practices or policies (G6a, G6b).

Freedom of expression 16%

Amazon’s e-commerce service listed some activities or content banned on its services, but used very general terms, without offering sufficient detail or definitions. The retail platform published an ambiguous description of its process for identifying content or accounts that violate content rules, and made no mention of whether it uses algorithmic systems to aid in this process. Policies for Alexa were equally lacking in this area (F3a). Although Amazon.com published a few blog posts that included high-level information about products and listings that it restricted, it did not offer detailed data in these areas (F4a, F4b).

Privacy 34%

Amazon outperformed only Samsung in our privacy category. The company was vague about how it collects (P3a) and handles user information, and despite allowing users to request a copy of their personal information (P8), it failed to disclose for how long it retains user information (P6). The company also did not provide clear instructions on how to opt out of its targeted ads (P7). Although Amazon shared more information about its practices for keeping user data secure (particularly data belonging to Alexa users), the company said nothing about how it handles data breaches (P15).